$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft File: KknhDg5wlLReuhwW-WN-HOxnvcY.mft (raw, json) Hash identifier: /as9sl8pkNeJPqlk0dzlkYcwJAFM0EXJvRS+pUj3C34= Subject key identifier: D6:4B:7F:12:20:FB:87:43:55:57:9B:86:6D:A2:88:E4:95:FE:07:02 Authority key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 Certificate issuer: /CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6 Certificate serial: 019F927FA9C675084C07530DC93EBA2FE0C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft Manifest number: 01FF Signing time: Fri 24 Jul 2026 05:01:07 +0000 Manifest this update: Fri 24 Jul 2026 05:01:07 +0000 Manifest next update: Sat 25 Jul 2026 05:01:07 +0000 Files and hashes: 1: CQnRFbws69KUV1eDOh7tfsMPWcY.roa (hash: XQrjplYUGhogLSVTsLi+InaBCSnPLhVF2WDLQrbLme4=) 2: KknhDg5wlLReuhwW-WN-HOxnvcY.crl (hash: aXqtOs4YfplGv0se0Fgs1mPkSjvZZM/yKseshEBbk3g=) 3: LsTr7Vivk39ZgCbG387swerRK6c.roa (hash: qnydcWksp1kG77yb//mZBlPJ1UQa9L4iT4xclFDE6nk=) 4: Nvkp4OHy0XjmNZcE8fX5Z-KueDQ.roa (hash: G0/QzlmRMEQtlNEZ8lhOPdNMyp6Hv4D1m4DiR2+PyZA=) 5: XZZS0J9cNFB34TPouF3k8-ZfCvw.roa (hash: /aqeE5gEnv2LBAY7p2JR8leoHcxdA9dbAKTDFlT19hs=) 6: Xyy6AHvHX9GWFOXo_Oy9VjDgePY.roa (hash: x6gttKcvk6cgj+0qilLdOAO3qlZUqMHAp+PtTLr5hkc=) 7: _JIme0QPIMt9vEAapbO3X4DxZ6o.roa (hash: 2TlFaoRWvQThXcHP6fVI19fGDUkBsF3BMCmvRQGDI4o=) 8: bWV9-ipYt2jjrK-6pf1rHveJ6GA.roa (hash: ddJ0XAD6t5QQElM8h1FtjnOAe1zaPavt5df6dzC3Pqs=) 9: m8zy49mlilgd1SPfU7e74Pq-L9w.roa (hash: 3ByWSNaUHf3Y97SFh9Lm+qACChqfIOs4+xqkpYGrpug=) 10: v22kTg0bTYFeeEWrApNqBfg_jxY.roa (hash: x8keV3yS66xLjOAZX4BOX56TvQOMZSSX31M99Vku2wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 05:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:7f:a9:c6:75:08:4c:07:53:0d:c9:3e:ba:2f:e0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6 Validity Not Before: Jul 24 05:01:07 2026 GMT Not After : Jul 25 05:01:07 2026 GMT Subject: CN=d64b7f1220fb874355579b866da288e495fe0702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:23:b1:f1:45:0d:46:6c:c5:0a:5f:10:1c:18: 44:79:81:d0:e3:ef:c3:37:49:fd:ca:6b:c5:48:ca: ff:9e:31:15:91:f0:d3:80:52:1b:1e:cc:13:f5:08: f4:81:d3:18:53:47:55:36:7a:36:7f:0e:a4:aa:99: c1:4e:88:74:ab:8d:0c:a0:d0:53:6d:bc:d5:f8:db: 3c:b1:89:2b:e2:d7:ba:6b:1c:80:e5:e2:d6:dc:89: 2c:ad:e7:ad:eb:e7:f3:1d:fa:b9:5d:95:6c:ef:6b: 72:ab:71:76:f5:de:2d:fd:54:84:3d:9c:ba:c1:21: 43:1b:97:9b:fe:6a:a3:98:67:da:34:08:26:58:e5: b4:02:34:82:45:c5:e4:f5:b2:3e:62:cb:da:2d:6d: e1:c2:96:9a:c2:a0:cf:47:0a:01:ed:9a:7a:5b:84: 65:63:94:b2:1d:07:28:5a:a3:ae:92:84:d9:79:00: d4:db:55:74:73:ec:7c:d7:72:3e:99:21:62:21:d0: 85:6a:23:b0:71:60:13:01:86:07:05:ef:cc:80:02: 20:53:96:79:28:ad:4e:7f:85:89:e8:34:1e:44:f2: 3a:a6:79:5e:95:7e:ef:1c:d9:3a:e4:51:73:14:61: dd:ab:4c:d0:e7:11:d9:ef:4a:3e:31:50:fa:cf:7c: 97:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4B:7F:12:20:FB:87:43:55:57:9B:86:6D:A2:88:E4:95:FE:07:02 X509v3 Authority Key Identifier: keyid:2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:cc:20:d5:0d:4d:0c:fc:2c:4d:5b:bd:cb:9d:b4:68:da:39: f6:d5:55:a1:a8:95:f1:99:ab:40:5b:0e:5a:ce:45:b6:b2:13: 8e:00:21:f6:19:d0:7d:6c:72:a2:c0:59:2b:72:9e:17:fb:64: 91:4c:39:9e:52:65:54:d5:3b:58:8d:f3:29:dc:7b:eb:78:6f: f9:bd:7c:15:1f:c9:92:83:6c:0f:0e:78:92:ec:30:d4:bc:f2: 9f:8d:da:22:7c:c7:95:b4:24:5d:96:80:e5:77:87:2d:e7:04: dc:cf:d7:80:72:f5:08:0b:c4:31:97:04:ad:b6:d5:96:cd:3f: 4e:52:fd:b0:c9:af:3d:fa:fa:18:70:bd:3b:69:78:82:ba:5f: cf:c0:d9:85:28:f5:af:91:9d:3d:8a:84:83:ec:f0:e9:04:a3: ac:e3:06:db:ed:d1:3d:66:e9:54:8c:28:08:95:7b:24:2b:e5: 1b:76:1c:e1:e1:f5:51:38:92:6b:4d:e9:6a:f6:ea:0d:e8:30: b4:6c:2d:29:69:f9:51:57:a5:f1:3a:fe:44:c6:a1:77:d5:45: b2:a8:a1:6b:55:ac:0e:fc:f0:7d:c1:5b:0c:1b:c1:ab:a7:4e: 93:c8:e8:ae:0d:82:15:44:4f:21:bd:9c:c6:91:d3:62:66:31: 16:ea:ed:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Sf6nGdQhMB1MNyT66L+DGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDllMTBlMGU3MDk0YjQ1ZWJhMWMxNmY5NjM3ZTFjZWM2 N2JkYzYwHhcNMjYwNzI0MDUwMTA3WhcNMjYwNzI1MDUwMTA3WjAzMTEwLwYDVQQD EyhkNjRiN2YxMjIwZmI4NzQzNTU1NzliODY2ZGEyODhlNDk1ZmUwNzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2COx8UUNRmzFCl8QHBhEeYHQ4+/D N0n9ymvFSMr/njEVkfDTgFIbHswT9Qj0gdMYU0dVNno2fw6kqpnBToh0q40MoNBT bbzV+Ns8sYkr4te6axyA5eLW3Iksreet6+fzHfq5XZVs72tyq3F29d4t/VSEPZy6 wSFDG5eb/mqjmGfaNAgmWOW0AjSCRcXk9bI+YsvaLW3hwpaawqDPRwoB7Zp6W4Rl Y5SyHQcoWqOukoTZeQDU21V0c+x813I+mSFiIdCFaiOwcWATAYYHBe/MgAIgU5Z5 KK1Of4WJ6DQeRPI6pnlelX7vHNk65FFzFGHdq0zQ5xHZ70o+MVD6z3yX5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZLfxIg+4dDVVebhm2iiOSV/gcCMB8GA1UdIwQY MBaAFCpJ4Q4OcJS0XrocFvljfhzsZ73GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQt MmQzOGIzOTNiMTIzLzEvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQtMmQzOGIzOTNiMTIz LzEvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcwg1Q1N DPwsTVu9y520aNo59tVVoaiV8ZmrQFsOWs5FtrITjgAh9hnQfWxyosBZK3KeF/tk kUw5nlJlVNU7WI3zKdx763hv+b18FR/JkoNsDw54kuww1Lzyn43aInzHlbQkXZaA 5XeHLecE3M/XgHL1CAvEMZcErbbVls0/TlL9sMmvPfr6GHC9O2l4grpfz8DZhSj1 r5GdPYqEg+zw6QSjrOMG2+3RPWbpVIwoCJV7JCvlG3Yc4eH1UTiSa03pavbqDegw tGwtKWn5UVel8Tr+RMahd9VFsqiha1WsDvzwfcFbDBvBq6dOk8jorg2CFURPIb2c xpHTYmYxFurt1g== -----END CERTIFICATE-----Generated at Fri Jul 24 10:27:12 2026 by rpki-client